When a user's external DIRECTORY_ID (i.e. LDAP ID/GUID) is changed (either by their LDAP record being moved or deleted/recreated), the admin can resync Profiles using TDI.
And then there are wsadmin ("Lifecycle") commands to re-sync the user's records for the membership tables in the other databases:
However, Connections does not have way to update DIRECTORY_ID of a group in the DB tables for the applications where it's possible to add Groups:
FILES, WIKIS, SNCOMM (Communities) and OPNACT (Activities).
Instead, customers have to directly update database of each component and update group's directory_id, or remove the group as member and re-add the group back in all applications which support groups.
wsadmin commands that can update DIRECTORY_ID of groups. This could possibly be done by using the CN attribute for the Groups as the input parameter.
REASON FOR CHANGE:
Provide complete Support for LDAP changes for Groups.